Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233392e302f32342d3234203d3e20323632323533.roa
File:                     3138312e3232342e3233392e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          +Xib0Gmu1fORo6x26l9RuPAET90s16W6dnYUgQ+kfxc=
Subject key identifier:   F2:A1:09:D1:E6:54:B7:89:36:D1:27:65:BD:A3:BB:1A:3F:5D:37:5A
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       236E9835F8BCE947CFBB4910F3CE01E88D986C29
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233392e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 05 Mar 2024 18:03:37 +0000
ROA not before:           Tue 05 Mar 2024 17:58:37 +0000
ROA not after:            Tue 04 Mar 2025 18:03:37 +0000
asID:                     262253
IP address blocks:        181.224.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:6e:98:35:f8:bc:e9:47:cf:bb:49:10:f3:ce:01:e8:8d:98:6c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Mar  5 17:58:37 2024 GMT
            Not After : Mar  4 18:03:37 2025 GMT
        Subject: CN=F2A109D1E654B78936D12765BDA3BB1A3F5D375A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:13:cd:92:f5:8a:cf:ee:8e:a2:2e:26:d0:b7:
                    7b:ef:23:5d:f3:30:0f:37:b9:7f:90:fa:b5:0b:0c:
                    53:57:56:81:12:7a:3c:31:ae:c2:8e:54:e9:ef:8f:
                    ef:b4:87:88:b5:3d:ad:d0:25:e4:e0:0c:f7:fa:d1:
                    b7:78:3f:89:3b:b2:ee:09:87:ab:58:f2:e6:32:10:
                    29:87:bf:ac:d9:86:b6:c3:56:ef:0a:7c:47:f3:51:
                    cf:38:7b:1d:6e:16:7b:66:18:51:03:8f:5a:2a:cf:
                    72:ee:1e:af:cc:c6:ab:99:8a:3f:c0:f3:3b:df:1c:
                    9a:ac:c5:37:d5:99:86:db:da:ca:ec:7c:83:43:6e:
                    12:83:35:83:9e:ce:35:3c:d7:b9:e0:a9:ff:6b:e3:
                    5b:9e:62:46:b9:c0:d8:72:e6:a4:26:ea:3e:7a:a3:
                    07:13:86:06:01:e2:3c:0b:f0:43:d0:ab:e0:8f:6d:
                    2e:71:05:df:6e:dc:2f:9b:fa:cb:6f:09:6a:c8:4b:
                    68:5e:fa:09:dd:a4:96:f8:48:68:09:9e:60:29:21:
                    31:a5:66:c8:2a:91:fc:df:3c:ca:fc:6c:df:11:43:
                    45:a0:a8:9a:29:ae:57:db:ac:92:92:8f:de:e1:13:
                    c0:8c:42:c0:16:e8:e4:e0:00:06:33:15:cf:a2:3d:
                    fa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A1:09:D1:E6:54:B7:89:36:D1:27:65:BD:A3:BB:1A:3F:5D:37:5A
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233392e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:b9:bd:f9:23:5f:ce:90:38:93:56:ed:a8:f6:58:2c:1e:43:
         01:fd:48:39:23:77:b8:c9:4c:00:21:43:96:0d:95:20:92:f1:
         f2:cd:9d:34:27:03:2b:e5:91:2e:5d:42:a3:e5:17:ac:bc:9c:
         51:a5:5c:9f:44:35:20:3d:f1:bf:92:75:ff:59:9c:55:8d:70:
         fb:af:37:0f:d6:a2:a2:82:f4:fd:f3:6a:a9:65:10:37:5d:5a:
         08:31:86:80:7a:bf:65:b1:5b:8a:e0:51:72:96:cd:2a:d8:6b:
         e8:7f:c7:95:30:30:db:47:51:1e:1f:89:4f:07:29:41:a3:29:
         d0:15:c3:1b:65:9a:fa:c9:39:3d:de:de:3d:a5:28:5f:f7:33:
         30:f1:6b:44:92:55:c2:93:78:76:e6:d4:91:06:05:e5:b1:2b:
         f9:d2:bd:5e:8c:a6:dd:07:ac:fe:48:2f:66:5c:a3:41:10:87:
         68:e2:a2:89:5c:6d:59:c6:6a:e0:00:c0:83:2e:dc:b5:fa:2d:
         36:4d:74:25:36:b3:30:de:4d:53:a6:35:49:66:cf:b9:94:34:
         aa:2c:ed:89:2c:55:36:67:6d:20:41:df:39:47:7a:3b:da:2d:
         e0:f2:59:f6:fe:20:36:a0:55:ea:ed:2b:43:56:b1:44:84:91:
         37:c9:21:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:57 2024 by rpki-client on console-ams.rpki-client.org